Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234302e302e302f31362d3234203d3e203133343839.roa
File:                     3139302e3234302e302e302f31362d3234203d3e203133343839.roa (raw, json)
Hash identifier:          TcFJifM+Jdiy3mldrt3ZXV62nnDUqzu196gEStbwsXY=
Subject key identifier:   ED:79:EB:32:22:CC:F3:C9:80:BF:2C:99:E2:35:25:DA:3D:8B:1B:90
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       17E14C8F55FBEC9652FE3116C77AC42AF3F084A2
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234302e302e302f31362d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:02 +0000
ROA not before:           Thu 19 Mar 2026 20:30:02 +0000
ROA not after:            Thu 18 Mar 2027 20:35:02 +0000
asID:                     13489
IP address blocks:        190.240.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e1:4c:8f:55:fb:ec:96:52:fe:31:16:c7:7a:c4:2a:f3:f0:84:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:02 2026 GMT
            Not After : Mar 18 20:35:02 2027 GMT
        Subject: CN=ED79EB3222CCF3C980BF2C99E23525DA3D8B1B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:27:e5:5e:7f:87:d6:04:18:7c:cf:b9:81:
                    25:85:dd:6d:80:61:3e:23:7d:4b:99:ea:05:4b:f0:
                    d0:38:35:c3:74:e1:0d:d8:aa:0a:21:d5:d4:b0:21:
                    de:8e:3c:fa:ec:8d:3c:2a:93:26:b6:92:c2:d0:32:
                    b8:8e:0a:a6:f2:a5:c0:84:38:b1:66:e3:5b:ef:bb:
                    b6:c4:89:fe:c2:5d:9c:c6:d1:22:f6:a8:95:fe:e1:
                    6b:7f:39:57:ca:23:af:6f:4b:1b:90:4a:c4:90:5c:
                    27:51:0b:97:30:23:80:63:c6:d5:6d:1c:f3:a8:b5:
                    2f:db:06:0e:92:7b:f8:b7:d1:01:f3:dc:38:f8:a0:
                    c8:31:ef:16:0f:24:32:67:14:37:3c:1d:89:79:03:
                    41:82:c2:37:ee:d7:64:c5:79:bb:59:d8:a4:d1:77:
                    c4:18:6c:f4:7a:11:62:6d:00:83:70:d8:df:eb:3b:
                    d6:68:fe:95:43:48:b0:13:02:44:4b:16:d2:28:f4:
                    c9:16:e7:ad:80:a4:1c:3f:a2:60:6b:f1:51:35:79:
                    be:f1:90:57:ad:66:78:9b:fd:d8:4e:9e:0f:a8:0b:
                    b8:2b:8f:ab:15:a5:67:2e:06:05:1f:3b:5a:67:03:
                    80:59:a2:99:f6:53:f1:3b:10:7f:64:d9:2a:61:43:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:EB:32:22:CC:F3:C9:80:BF:2C:99:E2:35:25:DA:3D:8B:1B:90
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234302e302e302f31362d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:46:4c:67:c5:d2:72:65:94:43:35:a6:61:7e:25:68:60:a4:
         d2:03:17:b0:87:09:f3:6b:ea:39:9e:e9:12:71:1c:d2:94:7c:
         dc:f2:de:b0:a6:e9:49:2e:e1:1f:3a:c9:85:38:55:5f:f3:5e:
         0c:1b:d9:1e:6e:9c:95:e7:6c:f9:7c:28:f0:d9:61:ca:d5:bf:
         55:3b:70:63:74:14:f5:fb:8a:f3:42:5d:32:02:74:98:86:60:
         d5:39:a0:22:19:eb:f0:6b:4a:cf:92:fb:85:7b:b9:70:3d:6d:
         6d:9e:69:55:91:0c:26:29:e3:8f:a5:1d:c3:59:11:02:3e:68:
         80:bd:1f:26:b7:01:fc:fa:3b:a6:e1:93:19:63:3c:d6:c0:1c:
         ca:00:58:23:f8:47:32:b2:37:c4:a8:14:b7:18:62:40:d5:c2:
         d2:16:86:cd:7f:f4:6b:6b:fa:34:c6:dc:ad:4f:09:02:65:a7:
         00:64:f7:c1:f1:05:f5:16:f8:65:e5:6f:5d:74:26:d4:82:f9:
         1c:be:a5:49:01:4b:03:cb:e4:57:b9:58:d4:29:ef:c2:a0:9f:
         ba:24:29:a0:9e:4c:49:f9:33:64:ca:9a:54:13:f0:de:3b:66:
         79:fb:e0:3f:94:4c:00:29:ae:fe:00:1a:9b:04:40:6d:50:84:
         2d:a6:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:14 2026 by rpki-client